Domain transfer

A domain transfer is the process of moving a domain's registration from one registrar to another. The domain stays under your name; only who's billing you and managing the record changes.

Transfers usually take 5-7 days from initiation to completion. ICANN sets the rules for most gTLDs, so the flow is largely the same regardless of registrar.

The standard transfer flow

1. Unlock the domain at the losing registrar. Toggle off "Domain Lock" or "Transfer Lock." Without this, the registry refuses transfers.
2. Get the EPP auth code. The 6-32 character secret that proves you own the domain. Some registrars show it in the dashboard, some email it.
3. Disable WHOIS privacy. Some losing registrars require this so the gaining registrar can verify the registrant email. Most modern ones don't.
4. Initiate at gaining registrar. Enter the domain name, paste the auth code, pay the transfer fee (usually = 1 year renewal). This also extends your registration by 1 year, so it's not "extra" money.
5. Approve the email confirmation. Most registrars send a confirmation email to the registrant's address on file. Click the link.
6. Wait. The losing registrar has 5 days to ACK or NACK the transfer. If they don't respond, the registry auto-approves on day 5.

What can block a transfer

• 60-day lock after registration. ICANN prohibits transfers within 60 days of a new registration. Buy a domain today, you can't transfer it for two months.
• 60-day lock after a contact change. Same rule, retriggered when you change registrant contact info.
• Pending payment or unpaid invoices. Some losing registrars stall if you owe them money.
• Wrong auth code. Typos in the code mean the registry rejects the transfer.
• Expired domain. Some registries refuse transfers in the redemption grace period.

ccTLDs are different

• .de uses DENIC's "CHANGE order" — no auth code, but the gaining registrar files a change request with DENIC directly.
• .uk uses Nominet's "IPS tag" — you change the IPS tag of the domain to the gaining registrar's tag and the transfer happens automatically.
• .fr is closer to the gTLD flow but requires EU registrant presence.

When this comes up in a SaaS

Two cases:

1. You provide registrar services. Customers want to bring their domain in from elsewhere. You need to receive transfers, which means having a registrar accreditation, gain/loss workflows, and the ability to apply auth codes via your registry partner.

2. You're a custom-domain platform. Customers don't transfer the domain to you (you're not their registrar), they just connect it via DNS. No transfer involved. Make sure your docs make this distinction clear, because customers ask "do I need to transfer my domain?" a lot.